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Abstract: 

PURPOSE : To provide an e-mail firewall for refusing to receive 
a spam mail by automatically checking for a selection, and 
receives only virus -free e-mails by automatically performing 
virus check on the receiving e-mails. 

SOLUTION: An e-mail firewall device 3 collates an e-mail 
received from a mail server 1 with an address registration 
database in a client computer 2, the e-mail firewall device 
3 refuse to receive the e-mail if a receipt refusal is set 
on the received e-mail . As a result , the e-mail is not stored 
in a mail box 5. Further, API (application program 
interface) checks as to whether an e-mail sent from an e-mail 
address on which the receipt refusal is not set is infected 
by a virus by starting virus check application software 4. 
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If a virus is found in the e-mail, the e-mail firewall device 
refuses to receive the infected e-mail. 

[0010] 

[PREFERRED EMBODIMENT] A preferred embodiment of 
the present invention will now be described with reference 
to the accompanying drawings. FIG. 1 is a diagram 
schematically showing system configuration of an e-mail 
firewall device; a plurality of client computers 2 are 
connected to a mail server 1. E-mail firewall software 3, 
virus check software 4, and e-mail client software 5, as 
software constitute the e-mail firewall device, are 
installed in the respective client computers 2. The 
individual client computer 2 is equipped with an address 
registration database 6, and is connected with a monitor 
7 and a keyboard ( including a mouse or other pointing device ) 
8, which are used as interfaces for registering, in the 
address registration database, information as to whether 
an e-mail is receivable or not by the client computer 2. 
[0011] 

The e-mail firewall software 3 has functions of 
registration and collation by co-operating with the address 
registration database 6. Namely, the e-mail firewall 
software 3 collates the address of an e-mail sent to the 
client computer 2 with addresses (combinations of a user 
name and a domain name) from which the user of the client 
computer does not want to receive e-mails and which is 
registered in the address registration database 6, and adds 
an e-mail address to the address registration database 6 
as required. The e-mail firewall software 3 has an address 
registration module for registering, using a GUI (graphical 
user interface), an address from which the user does not 
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want to receive an e-mail. For the purpose of previous check 
for virus infection, the e-mail firewall software 3 has also 
an extracting tool for a compressed file, a decoding tool 
for an encoded file, and an API (application program 
interface) for automatically starting the external virus 
check software 4. 
[0012] 

FIG. 2 is a diagram schematically showing a function 
of the e-mail firewall software 3. The e-mail firewall 
software 3 comprises a mail reception processing section 
3a, a mail analyzing section 3b, a mail outputting section 
3c, an extract processing section 3d, a decoder 3e, and a 
virus checker starting section 3f . The mail reception 
processing section 3a receives an e-mail, which is sent form 
the mail server 1 , addressed to the user of the client computer 
2; the mail analyzing section 3b analyzes a received e-mail 
to obtain a sender address, discriminate as to whether the 
received e-mail has an attached file, and further 
discriminate the file format of the attached file, i.e., 
whether the attached file is compressed and encoded; the 
mail outputting section 3c passes the received e-mail to 
the e-mail client software 5 when it is determined that the 
received e-mail is safe and is not set to receipt refusal; 
the mail extracting section 3d extracts an attached file 
to the e-mail if the mail analyzing section 3b has been 
discriminate that the file is compressed; the decoder 3e 
decodes the attached file when the mail analyzing section 
3d has been discriminates that the file is encoded; the virus 
checker starting section 3f starts the virus check software 
4 for checking as to whether the extracted or decoded file 
is infected by a virus or not. 
[0013] 
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The e-mail firewall software 3 further comprises a 
database registering section 3g for registering an address 
on which the receipt refusal is set, in the address database 

6 using the GUI, and a database collating section 3h for 
collating the sender address, which has been obtained by 
the mail analyzing section 3b, with e-mail addresses 
previously registered in the address registration database 
6. 

[0014] 

An operation performed by the e-mail firewall device 
will now be described with reference to a flow diagram of 
FIG. 3, First of all, prior to receiving an e-mail from 
the mail server, the user of the client computer 2 starts 
the address registration module of the e-mail firewall 
software 3 if necessary. Then the user operates the monitor 

7 and the keyboard 8, and registers an address from which 
the user does not want to receive an e-mail so that the address 
is registered in the address registration database 6 as a 
receipt refusal address (step SI). 

[0015] 

When the client computer 2 receives an e-mail from 
the mail server 1 ( step S2 ) , the sender address of the received 
e-mail is checked out and is collated with receipt refusal 
address in the address registration database 6 (step S3). 
If it is determined that the address of the received e-mail 
is a receipt refusal address ( step S4 ) , an action for a receipt 
refusal address is executed and a pop-up window, on which 
the sender address and a select button , such as ignore , return , 
or send template (e.g., "I refuse to receive your e-mail. 
Please send me no e-mail anymore."), is displayed on the 
monitor 7 of the client computer 2 for the user's selection 
( steps S5 , S6 ) . 
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[0016] 

On the other hand, if it is determined that the address 
of the received e-mail is not a receipt refusal address by 
the collation in step S3 (NO route of step S4 ) , it is 
discriminated as to whether the received e-mail has an 
attached file (step S7). Subsequently, when the received 
e-mail does not have an attached file, the e-mail is regarded 
as a safe e-mail and the received e-mail, which has been 
received from the mail server 1, is simply passed to the 
e-mail client software 5 (step S8). 
[0017] 

When it is discriminated that the received e-mail 
has an attached file at step S7, it is further discriminated 
as to whether the attached file is compressed or encoded. 
If the attached file is compressed, the file is extracted; 
and if encoded, the file is decoded (steps S9, S10). 
[0018] 

Then the virus check software 4 is started (step Sll) 
to check as to whether the extracted or decoded file is 
infected by a virus or not. If it is determined that the 
file is virus-free, the e-mail, which is received from the 
mail server 1 , is simply passed to the e-mail client software 
5 as a safe e-mail (steps S12, S18). On the other hand, 
if a virus is found in the file, the user is notified of 
the detection of the virus through a pop-up window on the 
monitor 7 so that the user makes an operation to remove the 
virus out of the file (step S13). 
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(57)Abstract 

PROBLEM TO BE SOLVED: To select received mails so as to 
receive only virus-free mails by automatically checking junk 
mails for rejection, and automatically making a virus check on 
mails judged to be accepted and then receiving them. 
SOLUTION: This electronic mail firewall device 3 collates in 
advance an electronic mail delivered from a mail server 1 against 
an address registration data base 6 on the side of a client 
computer 2, and an electronic mail sent from a mail address 
where reception rejection is set is rejected and not saved in a 
mail box 5. Even for an electric mail sent from a mail address 
where the reception rejection is not set, API starts virus check 
application software 4 to make a virus check and the electronic 
mail containing a virus is rejected. 
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